Privacy Policy

1. Introduction

The purpose of this Privacy Policy is to explain how the Limited Liability Company (LLC), legal entity ID No. 3-102-954834, owner and operator of the Mi Feria platform and the entity responsible for processing the personal data collected through the website www.miferiacr.com and the Mi Feria mobile app collect, use, store, protect, and, when applicable, disclose their users’ personal information in accordance with Law No. 8968, the Law on the Protection of Individuals with Respect to the Processing of Their Personal Data, its Regulations, and other applicable legislation of the Republic of Costa Rica. By using our services, the user declares that they have read and accepted this Privacy Policy and, when required by applicable law, grants their consent to the processing of their personal data.

2. Data Collection

We collect only the personal data strictly necessary to provide our services, including:

Registration data: name, surname, telephone number, email address (optional), date of birth (optional), gender, province, canton and district.
Usage data: information about how you interact with our platform, pages and screens visited, and features used.
Order data: personal information for delivery, purchase history, selected products, delivery method, e-invoice information, and delivery addresses
Technical data: IP address, browser type, device information, operating system, usage data and error logs.
Geolocation data: when the User accesses the Local Market module, we may request access to the device's location to facilitate the search for nearby markets and stalls. This access is optional and can be disabled in the device settings.

3. Use of Information

Personal data will be processed in accordance with the laws in force in the Republic of Costa Rica and, as applicable, based on the performance of the contractual relationship, the user’s consent, the legitimate interest of the data controller, or compliance with legal obligations. The data may be used to:

Manage and process orders.
Provide user support and customer service.
Facilitate communication between consumers and farmers.
Improve the functionality and security of the Platform.
Send communications related to the account or the services contracted.
Comply with legal obligations and respond to requests from competent authorities.

3.1. Data Retention Period and Account Deletion

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected or for as long as a relationship with the user exists, and in no case for a period exceeding ten (10) years from the date of last activity, in accordance with Law No. 8968. When a user requests the deletion of their account, their personal data will be deleted or anonymized, except for information that must be retained under applicable law or that is necessary to comply with legal obligations, to address administrative or judicial proceedings, or to exercise and defend rights.

4. Cookies and Similar Technologies

We use cookies and similar technologies for the following technical purposes:

Ensure the correct and secure operation of the web platform.
Analyze platform usage to improve our services.
Remember language preferences and display settings.
Protect the platform against attacks and unauthorized access (CDN/security).

Session and user authentication cookies are used exclusively in the Mi Feria mobile application, where customers manage their credentials and orders. The public website does not require customer login and does not store credentials in the browser.

Users may configure their browser to block or delete cookies; however, doing so may affect the operation of certain features of the Platform.

5. Data Security

We implement technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. This includes encrypting data in transit using industry-standard protocols, secure storage on infrastructure with restricted access controls, and periodic security reviews. However, no system for the electronic storage or transmission of information can guarantee absolute security; therefore, although we adopt the best available practices and technologies, we cannot ensure that the information is completely risk-free.

6. Sharing Information

We do not sell, rent, or commercialize the personal data of our users. Statistical, aggregated, or anonymized data does not constitute personal data and is governed by section 6.1. We may only share the strictly necessary information with third parties when indispensable for the provision of the Platform's services, in accordance with Law No. 8968, its Regulations, and other applicable legislation of the Republic of Costa Rica. Personal data may only be shared with:

Farmers and vendors at the markets, to the extent strictly necessary to process your orders.
With service providers that help us operate the platform (hosting, analytics), under their respective Data Processing Agreements (DPA) and privacy policies.
When required by law or competent authorities in Costa Rica.

In all cases, the information shared will be limited to the data strictly necessary to fulfill the corresponding purpose.

6.1. Statistical and Anonymized Information

Mi Feria may generate, analyze, use, share, or commercialize statistical, aggregated, or anonymized information derived from the use of the Platform. This information does not constitute personal data nor does it allow users to be identified directly or indirectly, and may be used by public institutions, organizations, research centers, companies, or other third parties for the purposes of analysis, planning, public policy formulation, research, project development, market research, or administrative and strategic decision-making. The user expressly accepts this purpose by accepting this Privacy Policy.

6.2. International Data Transfers and Infrastructure

To operate the Platform, Mi Feria uses cloud technology infrastructure providers whose servers are located outside Costa Rica, primarily in the United States. By accepting this policy, the User expressly consents to such transfers in accordance with Article 21 of Law No. 8968. The categories of providers and the data they receive are as follows: (i) Hosting, database and authentication: registration data, orders and delivery addresses, encrypted at rest and in transit using internationally recognized standards. (ii) Content delivery (CDN) and usage metrics: IP addresses and access logs for site operation; usage metrics are anonymous and contain no persistent identifiers. (iii) Error monitoring and stability: IP addresses, technical device data and, upon errors, active session context data. (iv) Web typography and static resources: the visitor's IP address when loading design resources. (v) Videos in editorial content: if published content includes embedded videos, the external player may load provider-specific identifiers when the page is visited. All providers operate under Data Processing Agreements (DPA) and internationally recognized security standards. Mi Feria does not authorize any of them to use the data for purposes other than those described herein.

7. User Rights

Under Law No. 8968 and its Regulations, you have the right to:

Access your stored personal data.
Request the correction of inaccurate or outdated data.
Request the deletion of your account and associated data. Delete your account here.
Withdraw your consent for the use of your data at any time, without affecting the lawfulness of prior processing.
Object to the processing of your data when it is based on legitimate interest.

To exercise any of these rights, you may contact us at our contact email. We will respond to your request within a maximum of five (5) business days in accordance with Article 7 of Law No. 8968.

8. Contact

For questions regarding this Privacy Policy or to exercise the rights granted by applicable law, users may contact Mi Feria by email at contacto@miferiacr.com.